Article 1 – Responsible Party

Café Restaurant Rootz B.V.
Grote Marktstraat 14
2511 BJ The Hague
Chamber of Commerce number: 27167766
E-mail: Info@rootz.nl

is the data controller for the processing of personal data as described in this privacy statement.

Article 2 – What data we process

We process the following personal data (depending on your use of our services):

• Name
• E-mailadres
• Phone number
• Reservation details (date, time, number of people, notes)
• IP address
• Information about your browsing behaviour on our website
• Any preferences or dietary requirements (if provided by you)

We process no special personal data, unless you voluntarily provide it yourself (e.g. in comments with reservations).

Article 3 – Purposes and bases

We process personal data solely on the basis of the following grounds from the GDPR:

1. Execution of an agreement

• For processing and managing reservations via Tebi

2. Legitimate interest

• To improve our website and services (Google Analytics)
• For internal administration and business operations

3. Permission

• For sending newsletters via MailerLite
• For the placement of tracking cookies

You can withdraw your consent at any time.

Article 4 - Reservations (Tebi)

We use the booking system to process reservations. To you.

• Tebi acts as processor
• We have a Processor agreement met Tebi afgesloten
• Data is used solely for booking management and communication

Your data will not be kept for longer than is necessary for operational and administrative purposes, unless a legal retention obligation applies.

Article 5 – Newsletter (MailerLite)

If you sign up for our newsletter:

• is your data processed via MailerLite
• delivery only takes place on the basis of permission (opt-in)
• You can unsubscribe at any time via the unsubscribe link

MailerLite may process data outside the EU. We ensure that this is done with appropriate safeguards in accordance with GDPR.

Article 6 – Cookies and Tracking

Our website uses cookies and similar technologies.

We use:

Functional cookies

• necessary for the website to function

Analytical cookies (Google Analytics)

• IP anonymization
• without sharing data with Google for advertising purposes

Tracking cookies

• only after explicit consent via the cookie banner

On your first visit, we actively ask for your consent (opt-in). You can always adjust your preferences.

Article 7 – Retention Periods

We do not keep personal data for longer than necessary

• Reservation details: maximum of 2 years (unless longer is required for tax reasons)
• Newsletter data: as long as you are subscribed
• Website analytics: maximum 14 months

Article 8 – Sharing of data with third parties

We only share your data with:

• Tebi (booking system)
• MailerLite (nieuwsbriefsoftware)
• Google (Analytics, anonymised)

We have concluded data processing agreements with all processors.

We sell your data never to third parties.

Article 9 – Transfer outside the EU

If personal data are processed outside the European Economic Area (e.g. via MailerLite or Google), we shall ensure appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs)
• processing via parties with an adequacy decision (if applicable)

Article 10 – Security

We take appropriate technical and organisational measures to protect your personal data, including:

• secure connections (SSL)
• access restrictions
• encryption where necessary

Article 11 – Your rights

You have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability

Requests can be submitted via: Info@rootz.nl

We will respond within 1 month.

You also have the right to lodge a complaint with the Dutch Data Protection Authority.

Article 12 – Mandatory disclosure

The provision of personal data for bookings is necessary for the provision of services. Without this data, we cannot process a booking.

Article 13 – Liability and Website Use

Café Restaurant Rootz B.V. shall not be liable for any malfunctions or inaccuracies on the website. Use of the website is at your own risk.

Article 14 – Amendments

We reserve the right to amend this privacy statement. The most current version is always available on our website.

Article 15 – Contact

For questions about this privacy statement or your personal data:

Café Restaurant Rootz B.V.
E-mail: Info@rootz.nl

Privacy Policy